How to configure a Proxy to Load Balance to an upstream Proxy/Proxies
Last Updated July 24, 2017
When there is a need to forward traffic from downstream Proxy to upstream Proxies and load balance those connections.
To configure the Downstream Proxy to send to one or multiple Proxies upstream we will first start with creating the Forwarding Hosts to be used. Forwarding to upstream Proxy/Proxies will be an Explicit Connection.
Create the Forwarding Hosts
Go to Configuration Tab > Forwarding Hosts > Forwarding Hosts Tab
Enter Name of the Proxy in the Alias field
Enter the IP of the Proxy
Leave the default type of Proxy
Check the HTTP box and enter the port that is configured on the upstream Proxy to accept the Downstream Explicit Connections
NOTE: Repeat above Steps for each upstream Proxy that will be needed, otherwise move to next steps
Create the Forwarding Group that will be Load Balanced
Go to Configuration Tab > Forwarding Hosts > Forwarding Groups Tab
Enter the Name for the Group desired
From the Members box click on the Forwarding Hosts to be part of the group and click Add
From the Load Balancing Method choose the desired method for Load Balancing. The default is Round Robin, But Least Connections might be better if wanting to have more balance as we do not monitor sessions the upstream has. The Proxy is only aware of how many connections we have with the upstream Proxy.
Create a Policy in the VPM in a Forwarding Layer to Forward to the just configured Forwarding Group
Go to Configuration Tab > Policy > Visual Policy Manager (VPM)
Open the VPM
If there is no current Forwarding Layer, add a new Forwarding Layer
Right click the Action > Set > New > Click on "Select Forwarding" Object (Conditions are subject to deployment and need)
In the Forwarding Object, Click on the Forwarding Group and click Add
Choose the action for "If no forwarding host is available" (default is Deny)
Click Install Policy
All new traffic will evaluate the rule and be load balanced to the Forwarding Group.
PLEASE NOTE: There will be Policy and connections going to the upstream Proxy that might need to be added/modified to allow these explicit connections from the downstream Proxy/Proxies. Packet Captures and Policy Traces on Both Proxies might be needed to make sure what type of policies are needed. Please contact support if you have any issues or question
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
Subscribed to the Article.
Unable to subscribe
Thanks for your additional feedback !!!
Enterprise Support Virtual Agent
Rate Me :
Tell us more:
Welcome! My name is Sami, the Enterprise Support Virtual Agent answering technical support questions.